A 38-year-old senior chemist working at a company in Mangaluru allegedly lost ₹1,18,707 after opening a fraudulent delivery tracking link received through WhatsApp. The link, disguised as an Android application file, prompted him to disclose his personal and credit card information.
How Did the Fraud Begin?
The chemist had ordered a chemical holder from GAIL India’s Khanpur facility on October 1, 2026. Four days later, on October 5, he received WhatsApp messages from two unknown mobile numbers containing a link to an Android Package Kit (APK) file.
Believing the message was connected to his pending order, he clicked the link to check the delivery status. The message appeared to offer a routine tracking service, giving him a reason to trust the unfamiliar link.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders
What Happened After He Opened the Link?
After clicking the APK link, an application opened on the chemist’s mobile phone and requested his name and credit card details. He believed the application was associated with the delivery of the chemical holder and entered the requested information.
The complainant later alleged that the application was fraudulent and had been used to obtain his financial details. The incident illustrates how criminals can exploit genuine purchases to make suspicious messages appear relevant and convincing.
How Was ₹1.18 Lakh Taken?
Following the disclosure of his credit card information, multiple unauthorised transactions were allegedly carried out. A total of ₹1,18,707 was transferred from his credit card to an account belonging to an unidentified individual.
The complaint alleges that the accused used a fake delivery tracking link to deceive the chemist and obtain his financial information. The available details do not establish the exact number of transactions or how the payments were authorised.
What Action Have Police Taken?
The chemist approached the Mangaluru CEN Crime police station and filed a complaint describing the suspicious WhatsApp messages, fraudulent application and subsequent financial loss.
Police registered a case in connection with the incident. The identity of the suspected fraudster and details of any arrests or recovery of money have not been disclosed.
Why Are Fake APK Links Dangerous?
An APK file is used to install applications on Android devices. In this case, the file was presented as a delivery tracking service, encouraging the recipient to open it and provide sensitive information.
Such messages can appear credible when they refer to an actual purchase. However, the presence of a tracking link does not establish that a message came from the seller or delivery provider.
The420 Insight: How Can Users Avoid Such Scams?
People should verify delivery updates through official websites or established customer support channels rather than opening APK links received from unknown WhatsApp numbers.
Credit card details should never be entered into unfamiliar applications merely to track a shipment. Users should also treat unexpected requests for financial information with caution, even when a message refers to a genuine order.
About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
